[QCR][Validation ring] Add BinSkim validation

Every build run source code SDL validation already but we don't run BinSkim since it adds a lot of time (could be 2 hours or higher).

For releases, since we'll be working with binaries and given that the code which generated them already passed SDL source code validation, we'll only run BinSkim which is a light-weight scanner that validates compiler/linker settings and other security-relevant binary characteristics.

BinSkim is one of the tools that can be executed by https://github.com/dotnet/arcade-services/blob/master/eng/common/sdl/execute-all-sdl-tools.ps1